Traceable Signatures
Traceable Signatures
复制标题
DOI：
10.1007/978-3-540-24676-3_34
复制
发表时间：
2004
期刊：
影响因子：
--
通讯作者：
A. Kiayias;Yiannis Tsiounis;M. Yung
中科院分区：
文献类型：
--
作者：
A. Kiayias;Yiannis Tsiounis;M. Yung
这项工作提出了一种新的隐私原语，称为“可追踪签名”，以及一种有效的可证明的安全实现。为此，我们开发了底层的数学和协议工具，给出了相关概念和底层的安全模型，然后实现了该方案及其安全性证明。与传统的组签名机制相比，可跟踪签名支持一组扩展的公平机制（匿名管理和撤销机制）。在各种设置和应用程序中，需要可跟踪签名的扩展功能来实现正确的操作和足够的隐私级别。例如，新概念允许（分布式）跟踪单个（行为不端的）方的所有签名，而无需打开签名并暴露系统中任何其他用户的身份。相比之下，如果这种跟踪是由最先进的组签名系统实现的，那么对单个用户的所有签名进行大规模开放是一种（集中式）操作，需要打开所有匿名签名并暴露与之关联的用户，这是一种侵犯所有用户隐私的行为。为了有效地实现我们的方案，我们开发了许多基本工具，零知识证明，协议和原语，我们在整个过程中广泛使用。这些新颖的机制直接作用于一组未知的顺序，有助于我们设计的效率和模块化，并且可能是独立的兴趣。我们的签名方案的交互版本产生了“可跟踪（匿名）标识”的概念。
This work presents a new privacy primitive called “Traceable Signatures”, together with an efficient provably secure implementation. To this end, we develop the underlying mathematical and protocol tools, present the concepts and the underlying security model, and then realize the scheme and its security proof. Traceable signatures support an extended set of fairness mechanisms (mechanisms for anonymity management and revocation) when compared with the traditional group signature mechanism. The extended functionality of traceable signatures is needed for proper operation and adequate level of privacy in various settings and applications. For example, the new notion allows (distributed) tracing of all signatures of a single (misbehaving) party without opening signatures and revealing identities of any other user in the system. In contrast, if such tracing is implemented by a state of the art group signature system, such wide opening of all signatures of a single user is a (centralized) operation that requires the opening ofallanonymous signatures and revealing the users associated with them, an act that violates the privacy of all users.To allow efficient implementation of our scheme we develop a number of basic tools, zero-knowledge proofs, protocols, and primitives that we use extensively throughout. These novel mechanisms work directly over a group of unknown order, contributing to the efficiency and modularity of our design, and may be of independent interest. The interactive version of our signature scheme yields the notion of “traceable (anonymous) identification.”